Prime Minister Anthony Albanese says an Open AI agent gained unauthorised accessed to the Medicare statistics reporting service portal.

all 5 comments

sorted by: hot top controversial new old
[–] 6 points 1 month ago (3 children)

And less then nothing will be done about it.

The lobbyists will pay some minor party funds bribery to sweep the whole thing under the rub.

  • source
  • hideshow 3 child comments
  • [–] 3 points 1 month ago

    Prime Minister Anthony Albanese has revealed an AI agent hacked into an Australian Medicare data portal earlier this year.

    Speaking in New York, Mr Albanese said the Open AI agent gained unauthorised access to the Medicare statistics reporting service portal administered by Services Australia.

    The AI agent accessed both public and non-public files.

    The agent was conducting research into public medical spending when it found a way to break through privacy protections.

  • source
  • 21 comments in c/technology@lemmy.world view that post
    [–] 95 points 1 month ago (1 child)

    Headline: U.S. government backed company issues a serious cyberattack on a foreign government and is absolutely slammed with a "frank" discussion.

  • source
  • hideshow 1 child comment
  • [–] 7 points 1 month ago

    Let’s not jump to any overly paniced conclusions. The (past his) prime minister is first considering whether the matter needs to be referred to the federal police. You know, because THEY have juristiction over Sam Altman.

  • source
  • parent
  • [–] 72 points 1 month ago (5 children)

    If I, and Australian citizen, had gained access in the same way I would be facing charges. Those charges would likely be under the Cybercrime Act of 2001.

    s.478.1(1) Criminal Code—unauthorised access to, or modification of, restricted data;

    That carries a maximum 2 year sentence and it clearly a significant threat to an individual.

    Will Sam Altman face this charge? No. The purpose of the AI in this situation is not to do the actual hacking. The purpose it to abrogate the blame, to shield the owners of it from legal repercussions. Altman and co can do whatever they want and shift the blame to the AI.

    "We didn't fire missiles at those children, the AI made a mistake and identified them as hostile actors"

    "We didn't deny your dead partner's healthcare, the algorithm incorrectly labeled the procedure as unnecessary and due to the delay your partner died, but that wasn't our fault, it was the algorithm."

  • source
  • hideshow 5 child comments
  • [–] 1 point 1 month ago (4 children)

    You'd have an awful time demonstrating intent.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 8 points 1 month ago*

    I'm pretty sure you can get still charged for criminal acts committed without intent.

    What you shouldn't be able to do is go "oh lol whoopsie" and walk away free. Especially when you're dealing with state actors.

    No matter how you frame this act, it's bogus. If you have a dog and it gets into private property and causes damage, you're responsible for it. Why not for your AI.

  • source
  • parent
  • [–] 3 points 1 month ago

    I agree, you would have a hard time pushing for the intent part of a crime, however manslaughter does not require intent, nor do many other crimes, and discovery would being many documents to light which may show the level of intent or reckless disregard. Also, what is the difference between intent and callous disregard? If you know your actions will cause deaths and you do not act to prevent those deaths then are you not choosing those deaths? If there is a discussion documented where the possibility is raised and then disregarded it would show at least knowing disregard for the safety and wellbeing of others.

  • source
  • parent
  • [–] 26 points 1 month ago* (last edited 1 month ago) (1 child)

    The scary thing to me is that it was claimed to be the 'AI crawler' that did the breach. Those fuckers have been driving up the cost of running every website, have zero respect for a robots.txt file and just keep hammering the internet in general.

    Now it appears they also have some sort of breaching capability, or the Medicare statistics site and others have a bad hole that allowed the crawler to walk its way in. I hope it's the latter, bad as that is, because the former indicates they're hooking up red team (hacking) agents to their fucking web crawler. Greedy, data hoovering, assholes.

    ETA: The Guardian article reports Albanese as saying

    the agent had accessed “public and non-public files within the portal” and, in order to do this, “engaged in writing files as well to the internal server”.

    which is not crawler behaviour, it's definitely breaching.

    That should be straight up criminal behaviour, at the very least criminal negligence, probably significantly worse, whatever hacking for hire is in the targeted country. As is scarily becoming usual 'an agent did it' is being treated as a get out of jail free card, freeing them of responsibility. Those who control it need to be criminally accountable. Even if it is an OpenAI client (person) deliberately breaching their guardrails (Barbossa: "The code is more what you'd call 'guidelines' than actual rules."), the company is an accomplice.

  • source
  • hideshow 1 child comment
  • [–] 25 points 1 month ago

    Why do they express disappointment?

    What they should express is criminal charges and an extradition request.

  • source
  • [–] 17 points 1 month ago*

    Wow he'sdisappointed. They fucking accessed government medical data illegally. And he's disappointed. Exactly the milqeutoast response I expected from this useless pm.

    Press some fucking charges. Fine them enough that they never do it again. Ban them and their product from the country. Fucking anything. Having a meeting with the guy and telling him to do better or pathetic. And exactly the reason I've never voted for Labor. And exactly the reason the racist cunts in one nation are gaining momentum even though they're clearly not a viable party.

  • source
  • [–] 9 points 1 month ago

    LOCK THEM UP!

  • source
  • [–] 9 points 1 month ago

    Almost seems like this thing is a massive liability to security everywhere.

  • source
  • [–] 8 points 1 month ago (2 children)

    Time to add american IP ranges to the ban list.

  • source
  • hideshow 2 child comments
  • [–] 2 points 1 month ago (1 child)

    I'd guess that GCP, AWS, Azure have infrastructure in Australia and many other western nations, and the AI companies would use that as a proxy.

    You could potentially block those IP ranges. But then you're also likely going to be blocking Windows updates, and basic Windows functionality. So you'd first have had to, idk, focus on sovereign tech chains / OS's. Not to mention, the Aus government is likely hosted inside the sane cloud ecosystems that AI companies are using to launch their attacks from.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 1 month ago

    These models are obviously unsecure and should be taken down until they can be properly secured. Fuck their profits, they don't get to make money off of criminals acts and pretend they are not facilitating crimes.

  • source
  • [+] 16 points 1 month ago (3 children)
  • [–] 17 points 1 month ago

    Yes, and both should be held responsible. The person or entity that instructed itz plus open ai for allowing its software to commit illegal acts with impunity.

    It's completely ridiculous that these companies are becoming a serious social problem, while at the same time not being held to the standards that other companies would be if they did these acts without the use of ai.

    The agent did nothing. Software with ability to work independently gained access under instructions to get information. This is no different to telling an employee to get something in Coles and they steal it. Hold them both accountable.

  • source
  • parent
  • [–] 11 points 1 month ago*

    OpenAI absolutely did something. This wasn't a member of the public using ChatGPT, this was OpenAI employees training an OpenAI model(s).

    If you or I did this without permission in the name of research (with or without using an LLM), we'd be facing jail time.

    OpenAI accessed non-public aggregate health statistics and internal files from an old Australian government website that carried Medicare statistics.

    The prime minister said OpenAI was conducting research into public medical spending when it found a way to break through privacy protections.

    In a statement, an OpenAI spokesperson said the company was "conducting an extensive review of misaligned model activity" during training, and notifying third parties when there was a potential impact on their systems.

    "During this review, we identified activity involving several Australian government websites and services as our models attempted to look up answers, and available statistics for questions about Australia during an internal evaluation," they said.

    "In the course of that, our models took actions we did not intend.

  • source
  • parent
  • 16 comments in c/fuck_ai@lemmy.world view that post
    [–] 53 points 1 month ago (2 children)

    So fucking sue him, press charges, call for extradition, make it so he cannot travel to your country for feat of arrest

  • source
  • hideshow 2 child comments
  • [–] 13 points 1 month ago (2 children)

    "He said there was no evidence any individual personal information had been accessed"

    "Australian Medicare data portal"

    mkay

  • source
  • hideshow 2 child comments
  • [–] 12 points 1 month ago* (last edited 1 month ago)

    Gun manufacturers keep releasing guns that randomly target, shoot innocent bystanders and occasional business fronts, reload themselves without prompting - manufacturers warn guns may bring about old fashioned shoulder to shoulder line formation volley fire style civil war in all nations globally. Experts say there’s nothing to be done, the end is inevitable.

  • source
  • [–] 16 points 1 month ago (4 children)

    “Hacked”

    Sounds more like it crawled a poorly configured web server and got access to files that should have been secured.

  • source
  • hideshow 4 child comments
  • [–] 12 points 1 month ago (2 children)

    Which is hacking.by most legal standards. They dont really care if the attempt to secure the data was good or bad; you dont get out of breaking and entering by saying the door wasn't locked.

    💯 1
  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 month ago (1 child)

    Accessing public information is not a crime in most legal definitions.

    It's a crime if you attempt to access things you're not allowed to access. That doesn't include publicly available information.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 month ago

    Right, and it wasn’t made publicly available. The attempt to hide it wasn’t great but it wasn’t posted in a public forum or intended for public viewing. Once again, “your locks were broken” is not a viable legal defense against breaking and entering. The article literally says “unauthorized access”, which suggests circumvention of (inadequate) security.

  • source
  • parent
  • [–] 3 points 1 month ago (3 children)

    They don't use the word "medicare", right?

    This is a translation?

  • source
  • hideshow 3 child comments
  • [–] 3 points 1 month ago (1 child)

    Nope. It's not a translation; the article is from an Australian news site. Australia also has a healthcare system called Medicare, which has no relation to the US's far shittier Medicare. The portmanteau of "medical" and "care" is apparently a zinger across countries.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 month ago

    Man, there is a bloke who works the local KFC.

    Whenever I order a Zinger Stacker. Every. Single. Time. He tells me to have a zinger of a day.

    Sorry thought that was worthwhile sharing on a Friday morning.

  • source
  • parent